Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/402eea-4814-4877-8d7a-3ca2f796b596/1/YsuMEjOwFrHwSBCJc9asPnYvY-0.mft
File: YsuMEjOwFrHwSBCJc9asPnYvY-0.mft (raw, json)
Hash identifier: 9z4yYqs9eWSCYsINfJFcjCx5E/bvnOWd+qPJEOsNOeQ=
Subject key identifier: F9:7F:0D:2C:DB:09:8D:16:C5:2C:18:87:B5:1C:CD:4B:81:95:F3:B4
Authority key identifier: 62:CB:8C:12:33:B0:16:B1:F0:48:10:89:73:D6:AC:3E:76:2F:63:ED
Certificate issuer: /CN=62cb8c1233b016b1f048108973d6ac3e762f63ed
Certificate serial: 0197B70ED77F21F21633E587EA87D24BCD6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YsuMEjOwFrHwSBCJc9asPnYvY-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/402eea-4814-4877-8d7a-3ca2f796b596/1/YsuMEjOwFrHwSBCJc9asPnYvY-0.mft
Manifest number: 115D
Signing time: Sat 28 Jun 2025 15:01:32 +0000
Manifest this update: Sat 28 Jun 2025 15:01:32 +0000
Manifest next update: Sun 29 Jun 2025 15:01:32 +0000
Files and hashes: 1: YsuMEjOwFrHwSBCJc9asPnYvY-0.crl (hash: xrVJz1epqvNgekLQKe40iD/fZxr96ebcV4MvkQvl8Xs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/402eea-4814-4877-8d7a-3ca2f796b596/1/YsuMEjOwFrHwSBCJc9asPnYvY-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/402eea-4814-4877-8d7a-3ca2f796b596/1/YsuMEjOwFrHwSBCJc9asPnYvY-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YsuMEjOwFrHwSBCJc9asPnYvY-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:d7:7f:21:f2:16:33:e5:87:ea:87:d2:4b:cd:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62cb8c1233b016b1f048108973d6ac3e762f63ed
Validity
Not Before: Jun 28 15:01:32 2025 GMT
Not After : Jun 29 15:01:32 2025 GMT
Subject: CN=f97f0d2cdb098d16c52c1887b51ccd4b8195f3b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:7f:ac:00:55:dd:cf:57:15:b9:22:0e:a8:af:
d9:60:ad:55:bd:a5:fe:06:df:9b:bb:3f:32:8b:a4:
ad:03:8b:ab:df:8c:49:a2:ea:55:f1:19:82:38:ab:
ed:d3:d3:7b:8f:f4:91:a1:c6:b4:d7:6c:c2:c6:b5:
40:5b:bc:13:27:ba:3c:34:4c:b0:16:f0:1b:04:1b:
1e:7c:d4:46:78:67:44:6b:42:24:c2:6f:10:0f:95:
62:c5:44:a6:26:e5:80:81:4e:9d:a2:1f:ed:ef:5e:
bc:6c:92:1b:95:54:8d:22:fe:56:80:c0:57:5e:30:
c5:74:b6:ea:0e:7f:89:6e:10:2a:4a:da:b1:e6:91:
53:06:65:45:f3:62:21:e2:4c:e5:a5:88:6e:45:f0:
f4:03:73:0b:fb:5a:14:a0:4a:54:09:e0:56:c2:b7:
e6:ee:a5:99:15:ef:89:60:cf:e4:18:88:a9:d2:7e:
44:e2:33:1d:4c:bf:c3:c1:1d:6d:a8:12:eb:8e:f0:
4d:40:6f:0a:37:f0:49:4f:0e:e6:9d:18:2e:a0:2e:
29:b3:68:45:79:3c:0b:27:f6:29:dd:51:4c:e2:9d:
5c:fd:00:7f:f6:4c:28:2e:21:44:47:79:2c:fc:d6:
78:ff:7f:82:04:03:cf:5e:c2:e4:3c:f6:54:de:95:
98:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:7F:0D:2C:DB:09:8D:16:C5:2C:18:87:B5:1C:CD:4B:81:95:F3:B4
X509v3 Authority Key Identifier:
keyid:62:CB:8C:12:33:B0:16:B1:F0:48:10:89:73:D6:AC:3E:76:2F:63:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YsuMEjOwFrHwSBCJc9asPnYvY-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/402eea-4814-4877-8d7a-3ca2f796b596/1/YsuMEjOwFrHwSBCJc9asPnYvY-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/402eea-4814-4877-8d7a-3ca2f796b596/1/YsuMEjOwFrHwSBCJc9asPnYvY-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:84:66:ce:79:0a:a4:e8:15:80:25:47:26:fc:7f:f4:73:cf:
b3:9b:f5:46:4e:e5:a8:d4:fc:3f:e4:e1:7a:80:0f:9b:e7:70:
ce:6d:7b:ed:da:08:5d:98:75:17:25:85:ef:f7:ab:f6:a5:1a:
69:05:10:ba:38:35:c4:4e:5b:fd:cc:3a:e5:e0:67:61:cf:6f:
eb:a7:87:d2:c2:f8:5f:77:c8:83:a2:14:b8:f3:51:6e:38:d0:
36:5d:a0:43:e8:e2:6f:59:7e:e7:54:c7:bf:55:ff:99:d9:97:
cf:a3:a7:56:a4:10:78:64:a5:96:c2:8b:ed:22:e3:ff:02:82:
29:ff:6a:ab:5e:3e:c3:df:ad:b4:8f:0c:a9:78:5f:2d:d2:50:
28:1f:8d:e4:8a:b7:fb:1e:79:c4:23:f2:49:b6:6b:63:e7:c5:
76:c7:1f:81:2e:96:4a:ef:75:10:34:96:c6:d9:cb:d2:37:84:
b5:7d:5e:c4:ea:1b:ff:57:b4:f3:a9:0a:2e:23:55:8d:de:4b:
d6:d0:98:2b:7c:89:eb:f7:94:ca:81:cc:f7:5a:55:13:13:20:
c5:34:50:e3:18:b4:a2:94:2c:c2:82:26:0e:a0:40:d9:1d:9d:
13:d3:fc:c2:79:03:29:47:dc:b7:12:fb:d1:59:b6:c1:e7:75:
64:01:7f:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:43:17 2025 by rpki-client